Test Ponts on an Oppo CPH 2211

Hello, I am new to the forum.
I was wondering if anyone could help me locate the test points for an Oppo CPH2211, as i work in a data recovery shop and i have to acquire data in bootrom mode to launch a brutefoce attack on said device. I had just ONE almost successful attempt at entering BROM using vol up and down, but that was the only one i managed to, and i have not been able to replicate it no matter how hard i try to do so. I was wondering if there was a test point and where said testpoint was on the pcb to allow me to have the device enter BROM and acquire data from there. thank you so much for the help